Privacy Policy

1. Who We Are

Modish Elegance Limited is a digital marketing agency registered in England and Wales, operating from 20 Old Street, London, EC2A 4NE, United Kingdom. We are the data controller responsible for your personal data collected through this website and our business activities.

2. Information We Collect

We may collect and process the following categories of personal data:

• Contact details — name, email address, telephone number, company name and job title, submitted via our contact form, email or telephone.
• Enquiry information — details of the services you are interested in and any message content you provide to us.
• Technical data — IP address, browser type and version, device information, operating system, and general location data, collected automatically when you visit our website.
• Usage data — information about how you use our website, including pages visited, time spent, and referral source, collected via analytics cookies.
• Marketing preferences — your preferences in relation to receiving marketing communications from us, such as newsletter subscriptions.
• Client & project data — where you become a client, information necessary to deliver our services, including billing details, campaign data and access credentials to third-party platforms you authorise us to use on your behalf.

3. How We Use Your Information

We use your personal data to:

• Respond to your enquiries and provide requested information about our services
• Deliver, manage and improve our SEO, digital marketing and graphic design services
• Send you marketing communications where you have consented to receive them
• Process payments and manage our contractual relationship with clients
• Monitor and analyse website usage to improve user experience
• Comply with our legal and regulatory obligations
• Prevent fraud and maintain the security of our website and systems

4. Our Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following legal bases to process your personal data:

• Consent — for marketing communications and non-essential cookies, which you can withdraw at any time.
• Contract — where processing is necessary to perform a contract with you, such as delivering our agreed services.
• Legitimate interests — for responding to enquiries, improving our website and services, and protecting our business, provided this does not override your rights and interests.
• Legal obligation — where we are required to process data to comply with the law, such as tax and accounting requirements.

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, understand how visitors use our site, and support our marketing activities. Cookies are small text files stored on your device.

We use the following categories of cookies:

• Strictly necessary cookies — required for the website to function correctly.
• Analytics cookies — help us understand how visitors interact with our website (e.g. Google Analytics).
• Marketing cookies — used to deliver relevant advertising and measure campaign performance (e.g. Google Ads, Meta Pixel).

You can control or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

6. Third-Party Services

We may use trusted third-party service providers to help us operate our business and deliver our services, including:

• Website hosting and infrastructure providers (e.g. Vercel)
• Analytics providers (e.g. Google Analytics)
• Advertising platforms (e.g. Google Ads, Meta, LinkedIn)
• Email marketing and CRM platforms
• Payment processors for invoicing and billing

These providers only process your data in accordance with our instructions and applicable data protection law. We do not sell your personal data to third parties.

7. How We Share Your Data

We only share your personal data where necessary, including with the third-party service providers listed above, our professional advisers (such as accountants or solicitors) where required, and law enforcement or regulatory bodies where we are legally obliged to do so.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting or reporting requirements. Enquiry data that does not convert into a client relationship is typically retained for up to 24 months, after which it is securely deleted or anonymised. Client data is retained for the duration of our engagement and for a further period as required by UK tax and accounting regulations (typically 6 years).

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including encrypted connections (HTTPS), access controls, and regular review of our data handling practices. While we take security seriously, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Some of our third-party service providers may process data outside the UK or European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions, to ensure your data receives an equivalent level of protection.

11. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

• Right to be informed — about how we collect and use your data.
• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to request deletion of your personal data in certain circumstances.
• Right to restrict processing — to limit how we use your data in certain circumstances.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making — we do not use automated decision-making or profiling that produces legal effects concerning you.

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, at ico.org.uk or by calling 0303 123 1113.

12. Children's Privacy

Our website and services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised “last updated” date. We encourage you to review this page periodically.